Privacy Policy

Overview

This Privacy Policy explains how smol ("smol," "we," "us," or "our") collects, uses, discloses, and protects information when you use our mobile application, website, and related services (collectively, the "Service").

smol is designed for pet care. Pet health and care records are not human medical records, and smol is not a healthcare provider, veterinary provider, insurer, or emergency service. Still, pet records can be personal and sensitive to you, and we treat them carefully.

Information We Collect

Depending on how you use smol, your device, your settings, your subscription status, and your region, we may collect the following categories of information:

• Account information: Email address, display name, name fields, authentication identifiers, sign-in provider data, profile settings, setup status, security settings, and account deletion requests.
• Pet profiles: Pet names, species, breed, sex, birthday or approximate age, weight, photos, vet information, microchip information, care notes, and other profile details you choose to add.
• Care and health records: Daily check-ins, quick logs, notes, symptoms, behaviors, mood, food and water entries, pee and poop entries, weight and vitals, activity, hygiene records, medications, vaccines, antiparasitics, conditions, observations, vet visits, reminders, inventory, reports, charts, and health snapshots.
• Sharing information: Sharing groups, group names, selected pets, invite codes, invited email addresses, roles, permissions, accepted members, revoked invites, sitter access duration, and activity needed to support shared pet care.
• Waitlist and product update information: Email addresses submitted through the website waitlist or product update forms, consent status, unsubscribe status, and related technical information needed to manage those communications and prevent abuse.
• Photos and media: Pet photos and images you upload, plus limited technical information needed to resize, store, retrieve, display, delete, and share those images. We remove image EXIF metadata during the app upload flow where supported.
• Notifications and device data: Push notification tokens, notification preferences, reminder settings, device platform, app version, timezone, app-open timestamps, biometric preference state, and similar operational data.
• Purchases and subscriptions: Subscription status, entitlement status, product identifiers, renewal or expiration status, trial or lifetime status, purchase restoration events, and purchase metadata received from the Apple App Store and RevenueCat. We do not receive your full payment card number from Apple.
• Usage, diagnostics, and analytics: App events, screen views, feature usage, searches, ad events, network and API errors, crash reports, logs, device and performance diagnostics, and feedback where analytics or diagnostics services are configured.
• Advertising and consent data: Ad consent status, ad display and interaction information, frequency-control data stored on your device, and identifiers or device information processed by advertising partners according to your consent choices and device settings.

How We Use Information

We use information to:

• Create, authenticate, secure, and maintain your account.
• Provide pet profiles, logs, check-ins, reminders, inventory, reports, sharing groups, charts, and health snapshots.
• Sync data across your devices and make shared pet information available to authorized group members.
• Store, display, process, resize, retrieve, and delete pet photos.
• Send reminders, health snapshot notices, re-engagement nudges, and pet sharing activity notifications when enabled.
• Provide subscriptions, restore purchases, enforce feature limits, and manage premium access.
• Send product updates, launch news, waitlist messages, and related marketing communications when you opt in. You can unsubscribe at any time.
• Show ads to free users, manage ad frequency, request ad consent where required, and measure ad delivery.
• Understand usage, improve features, troubleshoot bugs, monitor performance, prevent abuse, and protect the Service.
• Comply with law, enforce our Terms, respond to requests, and support account deletion or data export.

We do not intentionally provide your pet health records, care notes, pet photos, or veterinary records to advertising networks for ad targeting.

We do not sell your personal information or pet data for money. Some privacy laws define "sale," "sharing," or "targeted advertising" broadly; advertising and analytics SDKs may process identifiers, usage data, or ad interaction data as described in this policy and according to your consent choices and device settings.

Sharing and Disclosure

We may disclose information in the following ways:

• With your sharing groups: Pet information you choose to share may be visible to authorized family members, pet sitters, or other group members according to group permissions.
• With service providers: We use providers for hosting, authentication, database, storage, edge functions, push notifications, analytics, diagnostics, crash reporting, feedback, subscriptions, app distribution, sign-in, ads, consent flows, and security.
• With app store and payment providers: Apple and RevenueCat process purchase, subscription, entitlement, and restoration information.
• For legal, safety, and security reasons: We may disclose information if we believe it is required by law, needed to protect rights or safety, necessary to enforce our Terms, or appropriate to detect, prevent, or respond to fraud, abuse, security incidents, or technical issues.
• Business transfers: If smol is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

Third-Party Services

We rely on trusted service providers to operate smol. Depending on your device, account, settings, and subscription status, these may include:

• Supabase: Authentication, database, file storage, Edge Functions, access controls, and backend operations.
• Apple: Sign in with Apple, app distribution, operating system permissions, push infrastructure, and App Store subscription processing.
• Google: Google Sign-In and related OAuth services where enabled.
• RevenueCat: Subscription status, entitlements, purchase restoration, and paywall support.
• Expo push notifications: Delivery of reminder, health snapshot, re-engagement, and pet sharing notifications when enabled.
• Resend: Email contact management and delivery for waitlist, product update, and related communications.
• Cloudflare Turnstile and Upstash: Bot prevention, spam prevention, rate limiting, and abuse protection for public website forms.
• PostHog and Sentry: Product analytics, screen tracking, diagnostics, logs, crash reporting, feedback tools, and limited user context for debugging.
• Google AdMob: Ad delivery, ad measurement, ad consent flows, and related advertising technology for free users where ads are enabled.

These providers process information according to their own privacy practices and our configuration of their services. Availability and provider use may vary by platform, region, settings, and app version.

Photos, Camera, Notifications, and Biometrics

If you grant permission, smol may access your camera or photo library so you can add pet photos. Uploaded photos are used to:

• Show your pets in the app.
• Support selected sharing and reporting features.
• Store images with access controls tied to your account and sharing settings.

If you enable notifications, we store push tokens and notification preferences so we can send:

• Reminders.
• Health snapshot notices.
• Re-engagement nudges.
• Pet sharing activity notifications.

You can change notification preferences in smol settings or your device settings.

If you enable biometric unlock:

• Authentication is handled by your device operating system.
• smol stores local preference information needed to know whether biometric unlock is enabled for your account on that device.
• We do not receive or store your fingerprint or face scan.

Analytics and Diagnostics

When configured, we use analytics and diagnostics to:

• Understand feature usage.
• Detect crashes.
• Monitor reliability.
• Investigate errors.
• Improve smol.

These tools may receive user identifiers, account traits, device and app information, screen names, events, logs, network and API error details, and crash data.

PostHog Session Replay is disabled for the V1 app. We do not intentionally record app screen replays or screenshots for analytics.

Ads and Tracking Choices

Free users may see ads served by Google AdMob or related advertising technology. For V1:

• smol requests non-personalized ads.
• smol does not request App Tracking Transparency permission.
• Ads may still use device identifiers, ad identifiers, consent status, approximate technical information, product interaction, ad impressions, and ad interactions for ad delivery, measurement, frequency control, and fraud prevention.

You can manage ad choices through:

• In-app consent prompts where available.
• Your device privacy settings.
• Platform-level advertising settings.

smol plus users may receive an ad-free experience where available.

Data Retention and Deletion

We keep information for as long as needed to:

• Provide the Service.
• Maintain your account.
• Comply with legal obligations.
• Resolve disputes.
• Enforce agreements.
• Prevent abuse.
• Support security.
• Maintain backups.

Retention periods vary depending on the type of information and why it is used.

You can edit or delete many pet records in the app. You can permanently delete your account from app settings. Account deletion is intended to remove the following from active systems according to our deletion process:

• Your account.
• Pets.
• Logs.
• Reminders.
• Health records.
• Photos.
• Related app data.

This deletion process is subject to backups, legal obligations, fraud prevention, security needs, and records we must retain to operate the Service.

Your Choices and Rights

Depending on where you live, you may have rights to:

• Access certain personal information.
• Correct certain personal information.
• Delete certain personal information.
• Export certain personal information.
• Restrict or object to certain processing of personal information.

You can edit profile and pet information in the app, request a data export by contacting data@smol.pet, or request help with privacy choices by contacting privacy@smol.pet.

You can control many permissions through your device settings, including:

• Camera.
• Photo library.
• Notifications.
• Biometric unlock.
• Advertising or tracking preferences.

Some features may not work if a permission is disabled.

You can unsubscribe from product update emails using the unsubscribe link in those emails or by contacting us.

Security

We use practical safeguards designed to protect information, including:

• TLS encryption in transit.
• Managed database and storage infrastructure.
• Row-level security and access controls.
• Private storage paths where appropriate.
• Encrypted local session storage where supported.
• Backups.
• Monitoring.
• Authentication controls.

No method of transmission or storage is perfectly secure. You are responsible for keeping your device, account credentials, and sign-in methods secure.

Children

smol is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact privacy@smol.pet.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated Privacy Policy in the app, on our website, or through another reasonable notice and updating the "Last updated" date.

Contact Us

For general support, contact support@smol.pet.

If you have questions about this Privacy Policy, contact privacy@smol.pet.

For data export or deletion requests, contact data@smol.pet.

By using smol, you agree to the collection and use of information in accordance with this Privacy Policy.